Re: kern/137036: [ipsec] fastforwarding breaks ipsec

2009-07-25 Thread bz
Synopsis: [ipsec] fastforwarding breaks ipsec State-Changed-From-To: open->closed State-Changed-By: bz State-Changed-When: Sat Jul 25 19:41:06 UTC 2009 State-Changed-Why: Works as expected. I admit that inet(4) is probably not the best place to look for the description butat least it's there.

Re: How to change default source address?

2009-07-25 Thread Luiz Otavio O Souza
>> you could set up 2 routing tables and assign different apps to use >> different tables > > Is it possible to select routing table by ipfw setfib X ? > > someting like: > > ipfw add setfib 1 ip from a.b.c.d to any out xmit em0 > setfib 1 route add default 10.10.10.1 no that wouldn't work for

Re: Wrong multicast destination IP

2009-07-25 Thread iprebeg
On Sat, Jul 25, 2009 at 03:04:24PM +0200, ipre...@freebsd.org wrote: > > In recent current kernel, it appears that IGMPv2 reports (not IGMPv3) > are sent to wrong multicast address. I'm trying to setup mcast routing > in this way: > > .--. .--. .--. > |c1|-

Re: natt (again) in 7.2 stable and a forticlient

2009-07-25 Thread VANHULLEBUS Yvan
On Fri, Jul 24, 2009 at 06:10:42PM +0200, Ingo Flaschberger wrote: > Hi, > >> attached a patch for ports-security-ipsec-tools Makefile >> to disable to offer NATT-IKE-ENCAP. > > aii.. bug in the batch, sorry. > > attached new patch. Drafts 05+ should NOT be used, as they use IANA numbers which hav

Wrong multicast destination IP

2009-07-25 Thread iprebeg
In recent current kernel, it appears that IGMPv2 reports (not IGMPv3) are sent to wrong multicast address. I'm trying to setup mcast routing in this way: .--. .--. .--. |c1|-10.0.1.2---10.0.1.1-|mr|-10.0.2.1---10.0.2.2-|c2| '--' em0 em0 '--' em2